If the sites store other users info, then they fall under GDPR regardless of whether you are a company or not. I'm in the same boat here and this week will be p

If the sites store other users info, then they fall under GDPR regardless of whether you are a company or not. I'm in the same boat here and this week will be purging all identifiable user data that is over 90 days old, and emailing the remaining users with 'opt in' emails. Then I will be updating my backends to do this automatically on a schedule.